Description of problem: I could promote a pawn to a dame within gnuchess and gnuchess wass killed Version-Release number of selected component: gnome-chess-3.18.0-1.fc23 Additional info: reporter: libreport-2.6.3 backtrace_rating: 4 cmdline: gnome-chess crash_function: chess_scene_select_square executable: /usr/bin/gnome-chess global_pid: 17290 kernel: 4.2.5-300.fc23.x86_64 runlevel: N 5 type: CCpp uid: 1000 Truncated backtrace: Thread no. 1 (10 frames) #0 chess_scene_select_square at /home/mcatanzaro/jhbuild/checkout/gnome-chess/src/chess-scene.vala:238 #1 chess_view_real_button_press_event at /home/mcatanzaro/jhbuild/checkout/gnome-chess/src/chess-view.vala:292 #2 _gtk_marshal_BOOLEAN__BOXEDv at gtkmarshalers.c:131 #3 _g_closure_invoke_va at gclosure.c:864 #6 gtk_widget_event_internal at gtkwidget.c:7692 #7 propagate_event_up at gtkmain.c:2517 #8 propagate_event at gtkmain.c:2619 #9 gtk_main_do_event at gtkmain.c:1850 #14 g_main_context_iteration at gmain.c:3901 #15 g_application_run at gapplication.c:2311
Created attachment 1092858 [details] File: backtrace
Created attachment 1092859 [details] File: cgroup
Created attachment 1092860 [details] File: core_backtrace
Created attachment 1092861 [details] File: dso_list
Created attachment 1092862 [details] File: environ
Created attachment 1092863 [details] File: exploitable
Created attachment 1092864 [details] File: limits
Created attachment 1092865 [details] File: maps
Created attachment 1092866 [details] File: mountinfo
Created attachment 1092867 [details] File: open_fds
Created attachment 1092868 [details] File: proc_pid_status
Created attachment 1092869 [details] File: var_log_messages
Another user experienced a similar problem: Played chess. Second game after a draw. Got lazy and pawned a queen rather than working out how to mate with a rook, knight and bishop. Game crashed when I selected queen in the promotion dialog. reporter: libreport-2.6.3 backtrace_rating: 4 cmdline: gnome-chess crash_function: chess_scene_select_square executable: /usr/bin/gnome-chess global_pid: 7857 kernel: 4.2.6-301.fc23.x86_64 package: gnome-chess-3.18.0-1.fc23 reason: gnome-chess killed by SIGSEGV runlevel: N 5 type: CCpp uid: 1000
Tried to promote another pawn to a queen and reproduced the problem.
We might need a compiler or assembly language expert to debug this. I'm stumped.
Happened again on X. The previous occurrences were on Wayland so it's not Wayland related.
It's somehow caused by the hardening flags.
gnome-chess-3.18.0-2.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-c71b04ebc3
Reported this here: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/AYHBD5JYGIPZRZ5ENXSNT35YP5HTM256/
I did notice that Gnome Chess can promote it's own pawns without crashing. Is there a difference in how the promotions are handled?
(In reply to Dan Loomis from comment #20) > I did notice that Gnome Chess can promote it's own pawns without crashing. > Is there a difference in how the promotions are handled? Yes, the crash occurs in the code that reports the user's choice of promotion type from the GUI portion of the code to the chess backend.
gnome-chess-3.18.0-2.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-c71b04ebc3
gnome-chess-3.18.0-2.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.
Another user experienced a similar problem: I was playing gnome chess, and I was about to promote my pawn to a queen when the application crashed. reporter: libreport-2.6.3 backtrace_rating: 4 cmdline: gnome-chess crash_function: chess_scene_select_square executable: /usr/bin/gnome-chess global_pid: 4319 kernel: 4.3.3-303.fc23.x86_64 package: gnome-chess-3.18.0-1.fc23 reason: gnome-chess killed by SIGSEGV runlevel: N 5 type: CCpp uid: 1000